Search Jobs | Dice.com

Job Details

Skills

Department of Defense

Summary

The Security Control Assessor (SCA) will provide cybersecurity assessment, authorization, and risk management support for Department of Defense (DoD) systems, including ClientInformation Technology (IT) and Operational Technology (OT) environments. The SCA will execute the full DoD Risk Management Framework (RMF) lifecycle, evaluate security control effectiveness, support Authorization to Operate (ATO) decisions, and provide risk-based recommendations to improve enterprise cybersecurity posture in accordance with DoDI 8510.01, NIST SP 800-53, CNSSI 1253, DoD STIGs, and applicable cybersecurity policies.

Key Responsibilities:

Execute all seven (7) steps of the DoD Risk Management Framework (RMF Steps 0 6), including Prepare, Categorize, Select, Implement, Assess, Authorize, and Monitor activities for CLIENT IT and OT systems.
Perform Security Control Assessor (SCA) and Information System Security Manager (ISSM)-aligned responsibilities in accordance with DoDI 8510.01, DoD cybersecurity policies, and organizational security requirements.
Conduct system categorization activities using CNSSI 1253 impact levels and ensure accurate system registration and lifecycle management within CLIENT eMASS.
Evaluate, select, tailor, and assess security controls and control enhancements based on NIST SP 800-53 current revision, DoD overlays, and mission-specific cybersecurity requirements.
Develop, review, and maintain RMF authorization artifacts, including System Security Plans (SSP), Security Assessment Reports (SAR), Risk Assessments, Plans of Action and Milestones (POA&M), Privacy Impact Assessments (PIA), and supporting documentation.
Perform independent security control assessments to validate control implementation, effectiveness, and compliance with applicable DoD cybersecurity standards.
Execute and validate Security Technical Implementation Guide (STIG) and Security Requirements Guide (SRG) compliance assessments, document findings, and coordinate remediation activities with system stakeholders.
Prepare and submit complete RMF Authorization packages, including SSP, SAR, OT Risk Assessment Matrix (OT RAM), POA&M, and supporting evidence for Authorizing Official (AO) review and approval.
Conduct continuous monitoring activities in accordance with CLIENT RMF Continuous Monitoring strategies, schedules, and cybersecurity governance requirements.
Perform vulnerability management activities, including Information Assurance Vulnerability Alert (IAVA) monitoring, Assured Compliance Assessment Solution (ACAS) scan analysis, vulnerability validation, CVE tracking, and remediation coordination.
Analyze security assessment results, identify risks, evaluate residual risk, and provide actionable remediation recommendations to system owners and cybersecurity leadership.
Prepare and deliver cybersecurity briefings to senior leadership, including J62 Program Managers/System Managers and J61 leadership, regarding RMF status, security risks, vulnerabilities, and authorization readiness.
Support cybersecurity incident response activities, including coordination with Computer Emergency Response Teams (CERTs), investigation support, and data spill response procedures.
Validate implementation of Access Control Policies (ACP), including privileged and non-privileged account management, authentication mechanisms, user vetting, least privilege enforcement, and access authorization processes.
Collaborate with CLIENT ISSMs, Program Managers, System Managers, engineers, administrators, and mission stakeholders to integrate cybersecurity requirements throughout the System Development Life Cycle (SDLC).
Provide cybersecurity subject matter expertise to improve RMF processes, strengthen security governance, and maintain operational resilience across DoD mission systems.

Required Experience & Technical Expertise:

Demonstrated experience performing DoD RMF activities and supporting Authorization to Operate (ATO) processes for classified, unclassified, IT, and/or OT environments.
Strong knowledge of DoDI 8510.01, NIST SP 800-53, CNSSI 1253, DoD STIGs/SRGs, FISMA, and continuous monitoring requirements.
Experience with RMF governance tools such as eMASS, Xacta, CSAM, or equivalent GRC platforms.
Hands-on experience with vulnerability management tools including ACAS, Nessus, Tenable, or equivalent platforms.
Experience developing and reviewing RMF documentation, security assessment artifacts, POA&Ms, and risk acceptance documentation.
Ability to communicate technical cybersecurity risks effectively to both technical teams and senior government leadership.
Experience supporting cybersecurity operations, incident response coordination, access control assessments, and security compliance initiatives within DoD environments.

Employers have access to artificial intelligence language tools (“AI”) that help generate and enhance job descriptions and AI may have been used to create this description. The position description has been reviewed for accuracy and Dice believes it to correctly reflect the job opportunity.

Dice Id: 10448332
Position Id: 9041883
Posted 20 hours ago

Fitment

Dice Job Match Score™

🔗 Matching skills to job...

Contact the job poster

Ranadheer Reddy

Recruiter @ Delviom LLC

View Profile

Create job alert

Never miss an opportunity! Create an alert based on the job you applied for.

Similar Jobs

SCA with Active Secret Clearance

Remote

•

Today

Security Control Assessor (SCA) Duration: 3 Years Location: Remote Clearance: Secret Role Overview: The Security Control Assessor (SCA) will provide cybersecurity assessment, authorization, and risk management support for Department of Defense (DoD) systems, including ClientInformation Technology (IT) and Operational Technology (OT) environments. The SCA will execute the full DoD Risk Management Framework (RMF) lifecycle, evaluate security control effectiveness, support Authorization to Operate

Easy Apply

Full-time

130000 - 140000

Senior Cloud Security Engineer (AWS / RMF / ATO)

Remote or Colorado Springs, Colorado

•

Today

Auria is seeking a Senior Cloud Security Engineer to support the security architecture and accreditation of AWS cloud-hosted mission systems supporting the DoD USSF Joint Antenna Marketplace (JAM) program. This role focuses on implementing and securing AWS cloud environments and executing Risk Management Framework (RMF) activities to obtain and maintain an Authority to Operate (ATO). This position is remote with preference for Colorado Springs, CO or Huntsville, AL. The successful candidate wil

Full-time

USD 130,000.00 per year

LEAD INFORMATION SECURITY ENGINEER (ISSO with PQC)

Remote

•

Today

Lumen is the trusted network for the AI-powered world, connecting people, data, and applications through our expansive fiber network and connected ecosystem. We enable secure, high-performance connectivity across cloud, edge, and AI workloads for enterprises, governments, and communities. At Lumen, you'll work on infrastructure customers rely on today and build for what's next, where performance, security, and resilience matter. This is a high accountability environment where bold ideas drive

Full-time

USD 105,786.00 - 141,047.00 per year

Security Architect

Remote

•

Today

Job Title-Security Architect Role Summary The Security Architect serves as the primary point of contact for the client''s Privacy and Security Office, ensuring the solution complies with federal, state, and agency privacy and security policies. This role is responsible for designing secure cloud architectures, maintaining an optimal security posture, and supporting privacy and security assessments. Key Responsibilities Serve as the primary point of contact for the client''s Privacy and Security

Easy Apply

Full-time

Depends on Experience

Filter Results

Job post features

Posted date

Work settings

Employment type

Distance

Employer type

Work authorization

Security Control Assessor (SCA)

Skills

Summary

Dice Job Match Score™

Ranadheer Reddy

Similar Jobs

Security Control Assessor (SCA)

Job Details

Skills

Summary

Dice Job Match Score™

Ranadheer Reddy

Similar Jobs